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Top Stories 

• A fire and explosion at Santa Clara Waste Water Co. in Santa Paula, California, November 
18 shut down all lanes of Highway 126 for several hours, sent at least 46 people to 
hospitals for symptoms, and shut down 2 schools when approximately 1,000 gallons of an 
unknown chemical spilled and released a vapor cloud after a vacuum truck exploded at the 
facility - Ventura County Star (See item 18 ) 

• Two individuals were indicted by the U.S. Attorney’s office November 17 for allegedly 
stealing the identities of roughly 1 ,400 Detroit patients while employed at Henry Ford 
West Bloomfield Hospital and DMC Harper Hospital and using the patients’ personal 
information to file about $489,000 in fake tax refunds. - Detroit Free Press (See item 21 ) 

• Microsoft released an out-of-band patch November 18 to close a vulnerability in Microsoft 
Windows Kerberos KDC that could allow an attacker to elevate unprivileged domain user 
account privileges to domain administrator privileges. - (See item 28 ) 

• A 4-alarm fire broke at the Columbus Farmers Market in Springfield Township, New 
Jersey, inside Building No. 4 November 18 and destroyed at least 10 businesses and caused 
substantial damage to the structure. - Times of Trenton (See item 35 ) 
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Energy Sector 



1. November 19, La Crosse Tribune - (Wisconsin) Fire extinguished after morning 
explosion rocks North Side. Authorities are investigating the cause of an explosion 
after a tank of liquid asphalt at the Midwest Fuels plant in La Crosse exploded, 
prompting officials to warn residents within a 10 block radius to stay indoors 
November 19. Firefighters extinguished the blaze and deployed absorbent material to 
protect the Black River from possible contamination. 

Source: http://lacrossetribune.com/news/local/update-fire-extinguished-after-morning- 
explosion-rocks-north-side/article 9ael62c7-bbc3-54dd-8cca-84a8be35a888.html 

2. November 18, Associated Press - (North Dakota) North Dakota energy workers 
contain oil, water spill. Inspectors are monitoring the site of a spill after the North 
Dakota Oil and Gas Division reported that workers contained 317 barrels of saltwater 
and 4 barrels of oil at a Whiting Oil and Gas tank battery site near Alexander 
November 17. The company reported that a frozen valve caused the spill and did not 
cause any environmental damage. 

Source: http://bismarcktribune.com/bakken/north-dakota-energy-workers-contain-oil- 
water-spill/article 058a3972-6f3d-l Ie4-80db-lbaa73c05ccf.html 

3. November 17, Marshall News Messenger - (Texas) $250,000 worth of copper stolen. 
The Harrison County Sheriffs Office is searching for suspects in connection to a 
copper theft at Caddo Creek Resources Company after approximately $250,000 worth 
of spools of copper were taken from the mining operation. 

Source: http://www.marshallnewsmessenger.com/news/police/worth-of-copper- 
stolen/article 8bb3ef9e-6eab- 1 1 e4-b3a9-03c6730aff77.html 
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Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

4. November 18, Detroit News - (International) Ford recalls 65,000 Fusion cars for roll- 
away issue. Ford announced November 18 that it is recalling 65,000 model year 2014- 
2015 Fusion vehicles in North America, with 56,500 in the U.S., because the key can 
be removed from the ignition 30 minutes after the engine is turned off even if the 
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transmission has not been placed in ‘park.’ 

Source: http ://www .detroitnews .com/story/busines s/autos/ford/20 14/11/1 8/ford-fusion- 
recall/19213167/ 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

5. November 19, WNBC 4 New York City - (New Jersey) Man stopped for stealing $17 
worth of gas caught with 205 fake credit cards. A Brooklyn, New York man who 
was pulled over by New Jersey State Troopers in Woodbridge Township, New Jersey, 
on suspicion of gasoline theft was found in possession of 205 fraudulent payment cards 
with a value of around $100,000 November 1 1 after a search of his vehicle. The man 
was later charged with possession and use of a fraudulent credit card and theft of 
services. 

Source: http://www.nbcnewyork.com/news/local/Fake-Credit-Card-Gas-Station-Theft- 
Gianni-Simon-New-Jersey-New-York-283087031.html 

6. November 18, Bloomberg News - (New York) Broker pleads guilty in IBM 
acquisition insider scheme. A former stockbroker pleaded guilty November 18 to his 
role in an insider trading scheme that originated in a tip from a New York law firm over 
the acquisition of SPSS Inc., by International Business Machines Corp. The 
stockbroker was charged with making around $300,000 in illicit profits from the 
scheme that involved three others who have pleaded guilty and one other who was 
allegedly involved. 

Source: http://www.businessweek.com/news/2014-ll-18/broker-pleads-guilty-to-role- 
in-ibm-acquisition-insider-scheme 

7. November 18, KXTV 10 Sacramento - (California) FBI seeks ‘Bad Breath Bandit’ in 
Northern California. The FBI is seeking information related to the suspect known as 
the “Bad Breath Bandit” believed to be responsible for three bank robberies in the 
northern California region. The suspect’s most recent robbery occurred November 13 at 
a Tri Counties Bank branch in Durham, while the previous robberies occurred 
September 25 and June 17. 

Source: http://www.news lO.net/storv/news/local/california/2014/1 1/18/fbi-seeks-bad- 
breath-bandit-in-northem-califomia/19231739/ 

8. November 18, U.S. Attorney’s Office, Southern District of Florida - (Florida) 

Seventeen charged today in connection with stolen identity tax refund fraud 
scheme involving student financial services accounts. Federal authorities arrested 17 
individuals November 1 8 for their alleged involvement in a stolen identity tax refund 



- 3 - 



fraud scheme that used services provided by Higher One Inc., to Miami Dade College 
students in Florida and resulted in total intended losses of $1.9 million. The alleged 
organizers of the scheme also sought to use students’ Higher One accounts to commit 
federal benefit fraud, including Social Security fraud. 

Source: http ://w w w .fbi . gov/miami/press-releases/20 1 4/charged-today-in-connection- 
with-stolen-identity-tax -refund-fraud-scheme-involving-student-financial-services- 
accounts 



For another story, see item 21 
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Transportation Systems Sector 

9. November 18, WLEX 18 Lexington - (Kentucky) Sheriff: Driver of semi hauling 
cattle fell asleep. Eastbound lanes of Interstate 64 in Frankfort were closed for 2 hours 
and westbound lanes were closed for more than 4 hours November 18 after a semi- 
truck hauling 110 cows overturned when the driver fell asleep at the wheel, causing 3 
cattle to die and letting 15 loose. 

Source: http://www.lexl8.com/news/sheriff-driver-of-semi-hauling-cattle-fell-asleep 

10. November 18, Chicago Sun-Times - (Illinois) Brown, Purple line service back to 
normal after disruption from Lincoln Park Fire. Chicago Transit Authority’s Brown 
and Purple lines were temporarily suspended for approximately 6 hours between the 
North Side and the Loop when an extra-alarm fire broke out at the former James 
Mulligan Public School Building in Lincoln Park November 18. 

Source: http://chicago.cbslocal.com/2014/ll/18/brown-purple-line-service-back-to- 
normal-after-disruption-from-lincoln-park-fire/ 

11. November 18, Austin American-Statesman - (Texas) 1-35 open in north Austin after 
fuel spill. Over 100 gallons of fuel spilled from a semi-truck on Interstate 35 in north 
Austin following an accident involving 2 semi-trucks and a vehicle November 18 that 
shut down southbound lanes for 3 hours while crews worked to clear the scene. 

Source: http://www.statesman.com/news/news/local/southbound-i-35-shutdown-after- 
fuel-tanker-crash-n/nh9rD/ 

12. November 18, Syracuse Post-Standard - (International) Citing snow, Amtrak 
suspends service from Albany to Buffalo. Amtrak service between Toronto and 
Cleveland was temporarily suspended as well as service between Albany-Rensselaer 
and the Buffalo-Niagara Palls area November 18 due to heavy snowfall. 

Source: 

http://www.syracuse.com/news/index.ssf/2014/ll/citing weather amtrak suspends se 
rvice from albany to buffalo.html 

Lor another story, see item 18 



T Return to top i 



- 4 - 



Food and Agriculture Sector 

13. November 18, Reuters - (California) Owner of closed California sushi spot pleads 
guilty to selling whale meat. A California restaurateur pleaded guilty in federal court 
November 17 to charges of illegally selling sei whale meat to undercover agents in 
2005 at his now-closed Santa Monica sushi restaurant. The restaurateur and Typhoon 
Restaurant Inc. were ordered to pay $27,500 in penalties, while two chefs at the 
restaurant awaited sentencing after previously pleading guilty to related charges. 
Source: http://www.reuters.com/article/2014/ll/18/us-usa-whalemeat-california- 
idUSKCN0J22L320141118 



14. November 18, U.S. Environmental Protection Agency - (California) EPA requires 
Modesto wholesaler to protect Central Valley wetlands and pay penalty, following 
destruction of rare habitat. The U.S. Environmental Protection Agency ordered a 
Modesto canned food and nut wholesaler to pay $160,000 in penalties and purchase 
and endow a conservation easement valued at $1 million to resolve allegations that the 
man destroyed about 33 acres of vernal pools in Merced County in 2012 when he 
converted land from a cattle grazing pasture into an almond orchard without proper 
permits. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/596el7d7cac720848525781f0043629e/f7437 
d2c778475d685257d94006344bc ! OpenDocument 

15. November 18, U.S. Department of Agriculture - (National) Pennsylvania firm 
expands recalls pretzel dog products due to misbranding and undeclared 
allergens. The Food Safety and Inspection Service announced November 18 that City 
Line Foods Manufacturing expanded a November 8 recall for frozen pretzel hot dog 
products to include an additional 12,282 pounds of affected products due to undeclared 
soy lecithin. The products included in the expanded recall were produced between 
November 2013 and November 2014 and were shipped nationwide for retail 
distribution and fundraising. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 4/recall-079-20 1 4-release-EXP 



16. November 17, Madison.com - (Wisconsin) Police: Scrap thieves cause $100,000 
damage to Madison Dairy Produce building. A vacant Land O’Lakes-owned 
warehouse and office building in Madison suffered an estimated $100,000 in damage 
after thieves stripped metal, including copper, and stole air conditioning and heating 
units from the structure. 

Source: http://host.madison.com/news/local/crime and courts/police-scrap-thieves- 
cause-damage-to-madison-dairy- produce-building/article d8cf004 1 - 8ef6-5 a96-a27 5 - 
786c7a3efl47.html 



17. November 17, Greenfield Recorder - (Massachusetts) Emerald ash borer prompts 
wood quarantine. The Massachusetts Department of Conversation and Recreation 
issued a statewide quarantine November 17 on ash lumber and all hardwood firewood 
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in an effort to contain an infestation of the invasive emerald ash borer insect. The 
quarantine restricts the shipment of certain products to areas outside the quarantine area 
and requires treatments that include the removal of bark, sterilization, and fumigation. 
Source: http://www.recorder.com/home/14400598-95/emerald-ash-borer-prompts- 
wood-quarantine 
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Water and Wastewater Systems Sector 

18. November 18, Ventura County Star - (California) Santa Paula chemical explosion 
causes injuries, evacuations, road closures. A fire and explosion at Santa Clara 
Waste Water Co., in Santa Paula shut down all lanes of Highway 126 between Peck 
and Well roads for several hours November 18, sent at least 46 people to hospitals for 
symptoms, and shut down 2 schools when approximately 1,000 gallons of an unknown 
type of organic peroxide spilled and released a vapor cloud after a vacuum truck 
exploded at the facility. A mandatory evacuation was ordered for residents and 
businesses within a mile of the scene. 

Source: http://www.vcstar.com/news/local-news/ventura/officials-working-to- 
decontaminate-people-at-vcmc-exposed-to-substance-in-santa-paula- 
explosion 29956958 

19. November 18, Gainesville Times - (Georgia) Cornelia residents under boil-water 
advisory after main bursts. A boil water advisory was issued to Cornelia, Georgia 
residents November 18 until further notice following a 10-inch water main break that 
caused pressure to drop in the water system. Officials isolated waterlines while crews 
worked to repair the break. 

Source: http ://w w w . gaines villetimes .com/section/6/article/ 1 06032/ 
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Healthcare and Public Health Sector 

20. November 19, RARE 11 Minneapolis - (Minnesota) Patients notified after 

unsterilized equipment. The University of Minnesota Medical Center Colon and 
Rectal Clinic in Minneapolis notified 100 patients November 18 that a piece of 
equipment was not properly cleaned and disinfected, leaving the potential for infection 
after it was used. Several surgeries were delayed while authorities investigated and the 
hospital offered patients free infection screenings. 

Source: http://www.kare! 1 .com/story/new s/health/20 14/1 1/1 8/unsterilized-equipment- 
at-local-clinic/19255923/ 



21. November 18, Detroit Free Press - (Michigan) Feds: Identity thieves hit 2 metro 
Detroit hospitals. The U.S. Attorney’s office unsealed an indictment November 17 
charging 2 individuals for allegedly stealing the identities of roughly 1 ,400 Detroit 
patients while employed at Henry Ford West Bloomfield Hospital and DMC Harper 
Hospital, and using the patients’ personal information to file about $489,000 in fake tax 
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refunds. The pair lived together in Farmington Hills and authorities found bank records, 
credit cards, and hospital patient records at the home in January. 

Source: http://www.freep.com/storv/news/local/michigan/2014/ll/18/hospital-identitv- 
theft-metro-detroit/1 9239853/ 



22. November 17, KPHO 5 Phoenix - (Arizona) 1 killed after car smashes into assisted 
care home. A suspect was arrested for intentionally crashing into a Phoenix nursing 
home November 16 and killing one resident after the car entered through the living 
room and traveled through the kitchen. 

Source: http://www.kpho.com/story/27400350/l-killed-after-car-smashes-into-assisted- 
care-home 
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Government Facilities Sector 

23. November 19, WRIC 8 Richmond - (Virginia) Driver, charged after Richmond 
school bus accident. Three students and a bus driver were transported to area hospitals 
for minor injuries following an accident involving a school bus that was rear-ended by 
another vehicle in Richmond, Virginia, November 18. 

Source: http://www.wric.com/storv/27425936/driver-three-students-headed-to-hospital- 
after-bus-accident 

24. November 18, Richmond Times-Dispatch - (Virginia) Henrico High closed 
Wednesday. Henrico High School students were evacuated and dismissed November 
18 after a contractor working at the school caused a power outage knocking out heat, 
phone, and Internet access to the building. The Virginia school remained closed 
November 19 while crews worked to restore service to the campus. 

Source: http://www.timesdispatch.com/news/local/education/henrico-high-closed- 
wednesday/article 4c74c0cd-0bab-5cc 1 -9064-df70e7c7 1 5 5a.html 

25. November 18, KABC 7 Los Angeles - (California) 5 sent to hospital after chemical 
spill at UEI College in Anaheim. About 100 students were evacuated while 5 others 
were transported to an area hospital with symptoms of watery eyes and nausea 
following a chemical spill at the UEI College campus in Anaheim November 17. 
Classes were cancelled November 18 while a HAZMAT team cleared the scene. 

Source: http://abc7.com/news/5-sent-to-hospital-after-chemical-spill-at-anaheim- 
school/400815/ 

26. November 18, Associated Press; KAAL 6 Austin - (Iowa) Students injured in Iowa 
school bus accident. Eight students were transported to an area hospital with injuries 
after the driver of their school bus lost control while exiting a county road and rolled 
over in Louisa County, Iowa, November 18. 

Source: http://www.kaaltv.com/article/stories/s3623997.shtml 

For additional stories, see items 8, 18, and 20 
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Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

27. November 19, Securityweek- (International) Advanced variant of “NotCompatible” 
Android malware a threat to enterprises. Researchers with Lookout identified a new 
variant of the NotCompatible trojan for Android dubbed NotCompatible.C which 
includes several changes to avoid detection by security software, including encrypted 
communications and geographically distributed command and control (C&C) servers. 
The malware is being spread by spam emails and compromised Web sites and acts as a 
proxy on infected systems. 

Source: http://www.securitvweek.com/advanced-variant-notcompatible-android- 
malware-threat-enterprises 

28. November 18, Securityweek - (International) Microsoft fixes critical Kerberos flaw 
under attack with out-of-band patch. Microsoft released an out-of-band patch 
November 18 to close a vulnerability in Microsoft Windows Kerberos KDC that could 
allow an attacker to elevate unprivileged domain user account privileges to domain 
administrator privileges. The vulnerability has been exploited in limited, targeted 
attacks and users were advised to apply the patch as soon as possible due to the critical 
nature of the vulnerability. 

Source: http://www.securityweek.com/microsoft-fixes-critical-kerberos-flaw-under- 
attack-out-band-patch 

29. November 18, SC Magazine - (International) Apple releases OS X Yosemite and iOS 
updates. Apple released updates November 18 for its OS X Yosemite operating system 
and iOS 8 mobile operating system, adding improvements and closing an unlimited 
passcode attempt vulnerability in iOS 8. 

Source: http://www.scmagazine.com/apple-releases-updates-for-os-x-and- 
ios/article/383995/ 

30. November 18, Securityweek - (International) Flashpack exploit kit uses ad networks 
to deliver Cryptowall, Dofoil malware. Trend Micro researchers identified a 
malicious advertisement campaign that uses free ads to attempt to redirect users to a 
page hosting the Flashpack exploit kit, which then attempts to serve a variant of the 
Dofoil trojan or the Cryptowall ransomware. 

Source: http://www.securityweek.com/flashpack-exploit-kit-uses-ad-networks-deliver- 
cryptowall-dofoil-malware 

31. November 18, Softpedia - (International) Legit Windows Phone apps can be replaced 
by malicious ones through copy/paste. A researcher reported that rogue versions of 
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legitimate apps can be installed onto Windows Phone mobile devices after the 
installation of the legitimate app by replacing the files with the rogue app files. 
Source: http://news.softpedia.com/news/Legit-Windows-Phone-Apps-Can-Be- 
Replaced-By-Malicious-Ones-Through-Copy-Paste-465311.shtml 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

32. November 19, Kennewick Tri-City Herald - (Washington) Investigators probe 

Kennewick radio transmitter arson, offer $10,000 reward. Authorities are searching 
for the suspects responsible for November 15 arson fire at a radio transmitter station in 
Kennewick that caused more than $100,000 in damages, destroyed equipment, and 
knocked three local radio stations off the air. One station remains off air indefinitely 
while authorities continue to investigate the incident. 

Source: http://www.tri-citvherald.com/2014/ll/18/3266962/investigators-probe- 
kennewick.html 
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Commercial Facilities Sector 

33. November 19, WNBC 4 New York City - (New York) 1 dead, 14 hurt in Brooklyn 
apartment fire: officials. A fire that broke out November 19 at an apartment building 
in the Brooklyn area of New York City killed 1 resident and injured 14 others, 
including 6 individuals that are in critical condition. Officials are investigating the 
source of the blaze and working to determine if the structure that also houses a business 
needs to be demolished. 

Source: http://www.nbcnewvork.com/news/local/Fire-Flatbush-Apartment-Building- 
NY-Brooklyn- 1 5-Hurt-283 167281 .html 

34. November 19, Austin Time Warner Cable News - (Texas) Round Rock apartment fire 
displaces 37. Authorities are investigating the cause of a November 19 fire at the Apple 
Creek Apartments complex in Round Rock that damaged 16 units and displaced 37 
residents. 

Source: http://austin.twcnews.com/content/news/306235/round-rock-apartment-fire- 
displaces-37/ 

35. November 18, Times of Trenton - (New Jersey) Four-alarm blaze destroys building 
at historic Columbus Farmers Market in Burlington. A 4-alarm fire inside Building 
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No. 4 at the Columbus Farmers Market in Springfield Township November 18 
destroyed at least 10 businesses housed within the structure. The market was closed at 
the time of the fire and employees were safely evacuated. 

Source: http://www.ni.eom/mercer/index.ssf/2014/l 1/four- 

alarm blaze destroys building at historic columbus farmers market in burlington 
county.html 



36. November 18, U.S. Department of Labor - (Mississippi) Dollar General in Brooklyn, 
Mississippi, cited for repeat safety hazards; more than $51K in fines proposed. 
The Occupational Safety and Health Administration (OSHA) cited Dollar General 
Corp., for four repeat safety violations and assessed $51,700 in penalties following an 
August inspection at a store in Brooklyn, Mississippi. OSHA has performed 72 
inspections at Dollar General stores nationwide since 2009, 32 of which resulted in 
citations. 

Source: 

https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS RELEA 
SES&p id=27015 

37. November 17, Minnesota Public Radio News - (Minnesota) Thieves grab $300,000 in 
watches from St. Paul store. Police are searching for a group of men who broke into 
the R.F. Moeller Jeweler store in the Highland Park area of St. Paul November 15 and 
used hammers to smash glass display cases and steal about 30 Rolex watches valued at 
around $300,000. 

Source: http ://w w w .mprnews ■org/story/20 14/11/ 1 7/watch-robbery-st-paul 
For another story, see item 18 
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Dams Sector 

Nothing to report 
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To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 
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